Security Assessor

United States·WashingtonContractmid

EngineeringSecurity

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Who We’re Looking For (Position Overview): Spry Methods is on the search for a Security Assessor to join our team in DC. Strong working knowledge of IT Security requirements,

Technical Tools

EngineeringSecurity

Who We’re Looking For (Position Overview):

Spry Methods is on the search for a Security Assessor to join our team in DC.

Strong working knowledge of IT Security requirements, technical security countermeasures, risk managements processes, contingency planning, and secure data communications

Demonstrated experience conducting full cycle SA&A

Testing will include network, system, application and NIST control testing from administrative and technical perspectives

Experience analyzing vulnerability scans and interpreting risks and employing manual checks to validate vulnerability data

Be able to assist the customer with understanding risk and providing risk mitigation

Will create Security Assessments Plans, Reports, and POA&Ms

The security assessment team conducts documentation reviews, inspections, and interviews with key personnel knowledgeable/ responsible for the various controls

Personnel interviewed are asked to show evidence of compliance, demonstration security features, provide access to (or screenshots of) configuration files and system logs, and perform tests

The determination of compliance will be based upon responses to questions and analysis of supporting evidence..

Knowledge of CSAM is a plus

Strong cloud experience - conducting security assessments of MS Azure in AWS environments.

At least 5 years experience

Bachelor's Degree or 4 years of specialized experience

Strong security assessor background

Must understand the Risk Management Framework (RMF) process